This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: NtOrWt7csacdGdCXLzmqzrymkDStCPnFye/ydj1s9Nk= Subject key identifier: 86:FB:F8:A9:42:25:E9:D9:2D:29:1B:67:B6:15:4A:58:20:87:D5:F0 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 3C737AFEFF111E17C6717B98C4A63CCCD5A55E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 0209 Signing time: Tue 16 Dec 2025 11:21:49 +0000 Manifest this update: Tue 16 Dec 2025 11:16:49 +0000 Manifest next update: Fri 19 Dec 2025 22:13:49 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: 2dNnHUTqMKBPiecjoL3hT4/XDIgQtNq29Wol8NpvQVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 22:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:73:7a:fe:ff:11:1e:17:c6:71:7b:98:c4:a6:3c:cc:d5:a5:5e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Dec 16 11:16:49 2025 GMT Not After : Dec 19 22:13:49 2025 GMT Subject: CN=86FBF8A94225E9D92D291B67B6154A582087D5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:22:79:6c:b9:cb:cc:db:11:49:f0:f8:1d: 82:d1:c3:9e:5e:dc:8b:46:69:d7:ae:88:87:63:6e: 36:49:ce:78:96:17:90:4b:aa:8f:4e:52:49:64:43: 43:44:39:f6:bc:f2:f4:4d:a6:25:4b:5a:e9:9d:ba: 17:37:c5:6d:ab:a0:19:85:c5:d9:da:42:c9:b6:30: 39:7b:07:f1:2a:0b:64:9e:a4:b2:28:2b:38:16:44: 9f:e8:2e:f6:bc:c1:76:88:86:ce:e7:4e:b1:61:65: 82:55:b9:14:ca:16:0b:cb:25:d5:a2:e8:3a:b6:56: bb:8b:12:01:e4:7f:6c:3e:a6:33:44:73:44:34:e8: 6c:6f:b0:88:09:65:c2:27:5b:7d:29:ee:d3:00:d4: d8:13:ea:00:76:22:eb:79:12:cf:86:44:8a:1f:ef: 7b:b1:45:e9:24:2f:73:a8:5f:89:72:37:83:ef:e5: 0b:4f:ff:3e:f8:96:ea:76:e9:0f:22:6a:00:19:c2: 68:d1:cf:dd:c2:b0:d5:9b:df:75:92:fe:64:d6:78: 0d:5a:5e:c8:89:e5:cf:1a:fe:5b:3c:74:06:05:db: b4:b3:22:d9:b0:4b:80:b3:a5:b4:8f:8e:c9:8f:68: c3:f1:be:ec:6f:e6:95:a6:be:21:6c:0b:3b:d6:11: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:F8:A9:42:25:E9:D9:2D:29:1B:67:B6:15:4A:58:20:87:D5:F0 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f7:c2:05:ef:28:07:ff:27:35:1f:b7:38:81:a2:b3:ce:db: 88:ff:90:26:41:7d:5a:97:5e:f8:d3:04:c2:7e:3f:15:06:ab: d1:ef:f0:d5:14:5c:8e:64:8b:37:5d:7c:93:a1:9b:d2:6a:96: 86:05:2f:23:55:6d:17:b5:94:b7:84:5a:5c:35:c1:bd:c6:46: 53:9d:b5:47:67:e1:ed:db:1d:45:1c:1d:49:a1:a0:ca:b9:8d: 3d:f1:68:08:fd:67:5f:8c:03:c9:d1:66:1a:25:ef:c0:37:f7: 2c:91:b2:0a:7a:d3:bd:16:0e:17:d4:ab:35:8c:56:35:a3:1f: d4:7b:97:f2:73:7d:e8:09:e9:9c:1d:d2:77:cc:d0:6f:5b:ff: 49:fe:c5:38:cd:5b:e5:cb:90:be:3c:56:34:c0:21:12:18:e5: 39:43:7e:e5:61:6b:97:2d:8f:1d:02:31:6e:13:e8:9e:09:af: f6:89:b7:50:52:76:9a:d4:1a:ef:66:89:fc:7d:44:64:26:63: 4c:cd:04:22:75:d5:c3:12:78:44:7a:b2:2d:bd:69:ab:44:9d: 3f:10:dd:3b:ae:25:83:b1:d9:4f:e6:1f:e0:26:13:38:51:c0: d5:05:22:04:b6:95:5c:64:71:db:aa:64:e2:ab:9c:f0:f0:80: 2a:7c:4c:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHN6/v8RHhfGcXuYxKY8zNWlXg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNTEyMTYxMTE2NDlaFw0yNTEyMTkyMjEzNDlaMDMxMTAvBgNV BAMTKDg2RkJGOEE5NDIyNUU5RDkyRDI5MUI2N0I2MTU0QTU4MjA4N0Q1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmCJ5bLnLzNsRSfD4HYLRw55e 3ItGadeuiIdjbjZJzniWF5BLqo9OUklkQ0NEOfa88vRNpiVLWumduhc3xW2roBmF xdnaQsm2MDl7B/EqC2SepLIoKzgWRJ/oLva8wXaIhs7nTrFhZYJVuRTKFgvLJdWi 6Dq2VruLEgHkf2w+pjNEc0Q06GxvsIgJZcInW30p7tMA1NgT6gB2Iut5Es+GRIof 73uxRekkL3OoX4lyN4Pv5QtP/z74lup26Q8iagAZwmjRz93CsNWb33WS/mTWeA1a XsiJ5c8a/ls8dAYF27SzItmwS4CzpbSPjsmPaMPxvuxv5pWmviFsCzvWEYTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhvv4qUIl6dktKRtnthVKWCCH1fAwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGb3wgXvKAf/JzUftziBorPO24j/kCZBfVqX XvjTBMJ+PxUGq9Hv8NUUXI5kizddfJOhm9JqloYFLyNVbRe1lLeEWlw1wb3GRlOd tUdn4e3bHUUcHUmhoMq5jT3xaAj9Z1+MA8nRZhol78A39yyRsgp6070WDhfUqzWM VjWjH9R7l/JzfegJ6Zwd0nfM0G9b/0n+xTjNW+XLkL48VjTAIRIY5TlDfuVha5ct jx0CMW4T6J4Jr/aJt1BSdprUGu9mifx9RGQmY0zNBCJ11cMSeER6si29aatEnT8Q 3TuuJYOx2U/mH+AmEzhRwNUFIgS2lVxkcduqZOKrnPDwgCp8TL0= -----END CERTIFICATE-----Generated at Thu Dec 18 06:56:45 2025 by rpki-client